[Snort-users] Snort Beta v2.6

Will Metcalf william.metcalf at ...11827...
Mon Mar 20 16:48:06 EST 2006


make distclean
./autojunk.sh

./configure && make && make install
(or whatever)

Regards,

Will

On 3/20/06, Ron Jenkins <rjenkins at ...12829...> wrote:
>
>
>
> Is anyone else having these problems?
>
>
>
>
>
>
>
> ERROR: /etc/snort/snort.conf(519) unknown preprocessor "ftp_telnet"
>  Fatal Error, Quitting..
>
>  ERROR: /etc/snort/snort.conf(523) unknown preprocessor
> "ftp_telnet_protocol"
>  Fatal Error, Quitting..
>
>  ERROR: /etc/snort/snort.conf(571) unknown preprocessor "smtp"
>  Fatal Error, Quitting..
>
>  Rule application order:
> ->activation->dynamic->pass->drop->alert->log
>  Log directory = /var/log/snort
>  Verifying Preprocessor Configurations!
>  Warning: flowbits key 'trojan' is set but not ever checked.
>  Warning: flowbits key 'dce.bind.veritas' is set but not ever checked.
>  Warning: flowbits key
> 'dce.isystemactivator.bind.call.attempt' is set but not
> ever checked.
>  Warning: flowbits key 'http.jpeg' is checked but not ever set.
>  Warning: flowbits key 'realplayer.playlist' is checked but not ever set.
>  Warning: flowbits key 'ms_sql_seen_dns' is checked but not ever set.
>  Warning: flowbits key 'netbios.lsass.bind.attempt' is checked but not ever
> set.
>
>
>
>
>
> After  a short period of time snort exits with the following:
>
>  Not Using PCAP_FRAMES
>
>
>
>
>
> Also, the server drive becomes very busy.
>
>
>
> Thanks…
>
>
>
> Ron Jenkins (SnortCP, MCNE, CNE6, MCP, CCNA, CCEA)
>  Senior Architect
>  Data Integrity, LLC
>  "We Integrate People with Solutions"
>  1724 Dallas Drive
>  Suite 11
>  Baton Rouge, La 70806
>  Office. 225.927.8030
>  Fax. 225.927.8033
>  Cell225.931.1632
>
> Email. rjenkins at ...12829...
>  Web. http://www.dibr.net
>
> (Aanval Reseller and Technology Partner)
>
> http://www.aanval.com/tour/dibr
>
>




More information about the Snort-users mailing list